Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          wKggWPSKRTuaRbJzX+9qDIq66vPycA19Z1jArxt1kH0=
Subject key identifier:   AC:3F:54:99:F0:64:24:58:47:52:DF:F7:0E:87:FA:EA:2A:5F:45:B6
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          0153
Signing time:             Sat 17 Oct 2026 05:51:03 +0000
Manifest this update:     Sat 17 Oct 2026 05:51:02 +0000
Manifest next update:     Sat 24 Oct 2026 05:51:02 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: Dvbb9ufJZIS080I/ij/ofJaQRVNCRvDUsbfiZ7k/9VI=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 05:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: Oct 17 05:51:02 2026 GMT
            Not After : Oct 24 05:51:02 2026 GMT
        Subject: CN=6ad30cc6-e707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:60:c0:ae:fc:db:11:49:ce:9a:e3:91:e8:
                    25:94:18:eb:f7:8e:19:ef:5d:de:0d:51:d3:fb:20:
                    e7:36:93:5e:75:5c:f3:f4:a5:28:89:48:dc:f5:6e:
                    3e:c4:98:c5:4e:f6:49:b5:42:16:ad:52:08:d7:a3:
                    7b:4b:b9:02:29:15:5e:73:3b:b7:81:2b:e0:a5:1b:
                    49:b5:de:32:e9:6e:e1:ce:e6:65:38:26:98:b5:a8:
                    9c:7c:db:a1:f7:82:2a:55:6b:85:9e:20:57:0d:26:
                    32:a3:cc:2c:25:64:bd:6d:7b:66:61:9c:cc:2c:40:
                    28:51:54:de:6f:35:7d:8b:3b:65:c7:f3:99:80:1b:
                    41:91:4d:cf:bd:bf:eb:2e:43:44:57:99:4f:bb:bb:
                    1c:b3:25:db:9c:77:b9:a6:0d:50:27:58:d5:56:6c:
                    0a:76:85:13:58:51:96:e0:aa:92:8b:c6:1a:34:7d:
                    8e:87:da:e9:e4:0c:c7:df:c4:ed:94:93:d2:f1:73:
                    5f:c8:a2:90:75:5c:a7:b2:66:4b:92:fe:5b:44:9a:
                    89:27:d9:2f:43:94:30:f3:bb:b0:28:4b:43:b1:19:
                    d0:5d:48:a9:53:28:de:c0:dc:04:fc:ad:04:99:ec:
                    0e:9e:75:70:70:c3:c6:49:00:d4:8e:9a:06:7e:28:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:54:99:F0:64:24:58:47:52:DF:F7:0E:87:FA:EA:2A:5F:45:B6
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:67:a9:ff:e3:c5:24:52:49:6a:a7:ef:38:25:f7:57:4b:
         17:c4:ba:8d:11:b7:ef:41:74:50:fa:b0:67:0b:a7:67:50:f1:
         ac:fd:10:7a:13:2a:89:f0:b5:72:48:ef:bf:7d:a4:f0:4a:cc:
         47:96:9f:fd:de:11:81:44:67:4c:7f:3d:02:3a:26:49:32:8c:
         79:2b:d2:2d:c9:20:9e:d2:9e:7a:21:53:95:d0:04:1b:30:9c:
         a1:81:7d:72:1d:2d:72:b9:e8:ae:19:f8:2d:79:5a:0c:f7:91:
         38:92:80:b6:e6:a9:3e:d0:42:47:70:9e:05:f8:1a:c3:00:3c:
         0a:47:5a:1a:96:8b:66:97:e6:b3:b0:eb:71:50:6a:23:2d:83:
         49:46:ee:ce:93:28:91:a3:04:8b:b9:7c:6c:3e:70:42:3f:b3:
         29:b1:1b:b1:a5:ae:2b:04:96:37:cb:2d:e3:cf:fb:7f:27:13:
         16:a0:57:fd:e0:11:23:62:bd:be:47:29:6c:2b:a4:f3:80:ab:
         96:12:b4:87:62:2a:53:c7:51:a7:2c:1f:ce:e5:0b:4b:1d:a2:
         44:a9:28:36:68:b3:69:d9:57:3b:7d:37:c3:5b:0a:5b:3a:66:
         62:10:e2:bd:14:2a:6f:02:71:4a:bb:62:f8:c9:2e:13:d0:94:
         1e:54:ef:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjYxMDE3MDU1MTAyWhcNMjYxMDI0MDU1MTAyWjAYMRYwFAYD
VQQDEw02YWQzMGNjNi1lNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0N1gwK782xFJzprjkegllBjr944Z713eDVHT+yDnNpNedVzz9KUoiUjc9W4+
xJjFTvZJtUIWrVII16N7S7kCKRVeczu3gSvgpRtJtd4y6W7hzuZlOCaYtaicfNuh
94IqVWuFniBXDSYyo8wsJWS9bXtmYZzMLEAoUVTebzV9iztlx/OZgBtBkU3Pvb/r
LkNEV5lPu7scsyXbnHe5pg1QJ1jVVmwKdoUTWFGW4KqSi8YaNH2Oh9rp5AzH38Tt
lJPS8XNfyKKQdVynsmZLkv5bRJqJJ9kvQ5Qw87uwKEtDsRnQXUipUyjewNwE/K0E
mewOnnVwcMPGSQDUjpoGfiheRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKw/VJnw
ZCRYR1Lf9w6H+uoqX0W2MB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH/hnqf/jxSRSSWqn7zgl91dLF8S6jRG370F0UPqwZwunZ1DxrP0QehMqifC1
ckjvv32k8ErMR5af/d4RgURnTH89AjomSTKMeSvSLckgntKeeiFTldAEGzCcoYF9
ch0tcrnorhn4LXlaDPeROJKAtuapPtBCR3CeBfgawwA8CkdaGpaLZpfms7DrcVBq
Iy2DSUbuzpMokaMEi7l8bD5wQj+zKbEbsaWuKwSWN8st48/7fycTFqBX/eARI2K9
vkcpbCuk84CrlhK0h2IqU8dRpywfzuULSx2iRKkoNmizadlXO303w1sKWzpmYhDi
vRQqbwJxSrti+MkuE9CUHlTvyg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 01:43:56 2026 by rpki-client